CVE-2025-71228
Received Received - Intake

Kernel Page Fault Vulnerability in Linux LoongArch VM_NONE/VM_SHARED

Vulnerability report for CVE-2025-71228, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-02-18

Last updated on: 2026-02-27

Assigner: kernel.org

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-18
Last Modified
2026-02-27
Generated
2026-07-06
AI Q&A
2026-02-18
EPSS Evaluated
2026-02-26
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel on the LoongArch architecture. It involves an incorrect setting of the protection_map[] for VM_NONE and VM_SHARED memory areas on 32-bit platforms. Specifically, the _PAGE_PROTNONE value is 0, so setting a virtual memory area (VMA) to VM_NONE or VM_SHARED causes pages to be marked as non-present, which leads to a kernel page fault (Oops). The fix replaces _PAGE_PROTNONE with _PAGE_PRESENT to set the correct protection_map[].

Impact Analysis

This vulnerability can cause the Linux kernel to crash due to a page fault when handling certain memory areas (VM_NONE or VM_SHARED) on 32-bit LoongArch platforms. Such crashes (kernel Oops) can lead to system instability, potential denial of service, and unexpected reboots, impacting system availability.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71228. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart